Linux Kernel Vulnerability in Wilc1000 Wireless Driver

CVE-2022-50361

What is CVE-2022-50361?

The Wilc1000 wireless driver in the Linux kernel contains an improper resource management vulnerability. This issue arises from the failure to execute 'unregister_netdev()' in the error handling path during the initialization process. Specifically, if the function 'alloc_ordered_workqueue()' fails, the system does not properly unregister the network device, leading to potential system instability. This vulnerability could be exploited to create a denial-of-service condition, impacting the overall reliability and functionality of the affected network component.

References